Remote Attackers Can Cause Buffer Overflow in HWATAIServiSign Windows Version
CVE-2024-40723

4.3MEDIUM

Key Information:

Vendor: CHANGING Information Technology
Status: Hwatai Servisign
Vendor: CVE Published:; 2 August 2024

🔔 Create CHANGING Information Technology Vulnerability Alert

What is CVE-2024-40723?

The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the length of server-side inputs. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the HWATAIServiSign, temporarily disrupting its service.

References

https://www.twcert.org.tw/tw/cp-132-7968-ce2ef-1.html

https://www.twcert.org.tw/en/cp-139-7974-0562f-2.html

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 2, 2024